Re: [Announce] GnuPG 2.1.0 modern released

2014-11-09 Thread Peter Lebbing
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/11/14 22:21, Simon Nicolussi wrote: Invoking GnuPG that way is insecure without knowing the contents of the signature file. An attacker could have replaced it by something that's not, in fact, a detached signature. Oops! Very nice find,

Re: [Announce] GnuPG 2.1.0 modern released

2014-11-09 Thread Simon Nicolussi
Peter Lebbing wrote: On 07/11/14 22:21, Simon Nicolussi wrote: gpg --verify gnupg-2.1.0.tar.bz2.sig gnupg-2.1.0.tar.bz2.sig However, here's a small mistake. This should read: gpg --verify gnupg-2.1.0.tar.bz2.sig gnupg-2.1.0.tar.bz2 Oops, right. I originally used a more concise brace

GnuPG 2.1.0 for Mac OS X Available

2014-11-09 Thread Patrick Brunschwig
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I'm happy to announce the first release of the GnuPG for OSX project - - a new distribution of GnuPG 2.1 for Mac OS X ready to download and install. I started GnuPG for OSX to provide up to date distributions of GnuPG on Mac. Unlike GPG Tools, this

Re: GnuPG 2.1.0 for Mac OS X Available

2014-11-09 Thread Nicholas Cole
Hi Patrick, Thanks for this! It's a really useful resource. Are you able to explain how you managed to get GnuPG-2.1 to compile? N. On Sun, Nov 9, 2014 at 6:39 PM, Patrick Brunschwig patr...@enigmail.net wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I'm happy to announce the first

Re: Error building GnuPG modern 2.1.0 on Yosemite

2014-11-09 Thread Mel Brands
Werner, Thank you! Patching with -p1 fixed the compilation issue but now I've run into a linking issue (I'm using the latest libgpg-error 1.17). This is the error that occurs near the very end: gcc -I/usr/local/include -I/usr/local/include -I/usr/local/include -g -O2 -Wall

Re: [Announce] GnuPG 2.1.0 modern released

2014-11-09 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Thursday 6 November 2014 at 9:01:51 AM, in mid:87ioisn1mo@vigenere.g10code.de, Werner Koch wrote: This is an experimental installer for Windows including GPA as graphical key manager and GpgEX as an Explorer extension. Please

Re: [Announce] GnuPG 2.1.0 modern released

2014-11-09 Thread Murphy
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ah, found it under (11) ECC (set your own capabilities) (11) ECC (set your own capabilities) Your selection? 11 Possible actions for a ECDSA key: Sign Certify Authenticate Current allowed actions: Sign Certify (S) Toggle the sign capability

Re: [Announce] GnuPG 2.1.0 modern released

2014-11-09 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Monday 10 November 2014 at 1:54:47 AM, in mid:54601ae7.8010...@gmail.com, Murphy wrote: Interesting. That curve doesn't show in the linux build. And neither does option 12 in the 'select what kind of key you want' menu Sorry, I was

Re: [Announce] GnuPG 2.1.0 modern released

2014-11-09 Thread Murphy
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ok - found the same issue with gpg2 --expert --edit myKey gpg addkey Please select what kind of key you want: (3) DSA (sign only) (4) RSA (sign only) (5) Elgamal (encrypt only) (6) RSA (encrypt only) (7) DSA (set your own capabilities)

Re: [Announce] GnuPG 2.1.0 modern released

2014-11-09 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Monday 10 November 2014 at 2:25:13 AM, in mid:54602209.10...@sumptuouscapital.com, Kristian Fiskerstrand wrote: For OpenPGP Curve25519 is only defined[0] for signatures, certificates, authentication using the Ed25519 scheme. For

Re: [Announce] GnuPG 2.1.0 modern released

2014-11-09 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Monday 10 November 2014 at 2:09:31 AM, in mid:54601e5b.4040...@gmail.com, Murphy wrote: It generated fine in Linux. It did in Windows for a main key, and for a signing subkey. And I now know it can't generate me a Curve 25519 encryption

Re: [Announce] GnuPG 2.1.0 modern released

2014-11-09 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 11/10/2014 12:57 AM, MFPA wrote: Hi On Thursday 6 November 2014 at 9:01:51 AM, in mid:87ioisn1mo@vigenere.g10code.de, Werner Koch wrote: This is an experimental installer for Windows including GPA as graphical key manager and

Anonymous Receipient is not compatible with ECC?

2014-11-09 Thread Hideki Saito
Hi I have attempted to use anonymous recipient with ECDH key on 2.1, however, it gives me the following: gpg: encrypted with ECDH key, ID gpg: decryption failed: No secret key I can, however, pass --try-secret-key with the appropriate key to force it to decrypt, but it seems like when

Re: Error building GnuPG modern 2.1.0 on Yosemite

2014-11-09 Thread Patrick Brunschwig
Apply this patch before doing ./configure and it will build OK: https://sourceforge.net/p/gpgosx/source/ci/master/tree/patches/makefile.patch -Patrick On 09.11.14 22:56, Mel Brands wrote: Werner, Thank you! Patching with -p1 fixed the compilation issue but now I've run into a linking

Re: GnuPG 2.1.0 for Mac OS X Available

2014-11-09 Thread Patrick Brunschwig
On 09.11.14 21:51, Nicholas Cole wrote: Hi Patrick, Thanks for this! It's a really useful resource. Are you able to explain how you managed to get GnuPG-2.1 to compile? See the scripts in the git source tree: https://sourceforge.net/p/gpgosx/source/ci/master/tree/create_gpg I have XCode